“certutil -deleterow” not doing anything

i'm trying cleanup old , failed certificates on ca using certutil. i'd delete failed requests prior july 1st, 2014. i'm running following:

    certutil -v -deleterow 7/1/2014 request


worked while, has stopped doing anything. there mentions around internet of certutil utility exhausting version store , having restarted, doesn't appear what's happening in case - it's not doing @ all. output when start command is:

    7/1/2014 12:00 am
    7/1/2014 12:00 am


, nothing further.

i've tried defragging ca db, doing integrity check, restarting service, restarting server, none of have had impact on stuck condition i'm in. can manually delete individual rows, ca still responsive certutil command, not specific one. can give me idea i'm missing?

hi mark,

as workaround, please refer batch script:

@echo off  /f %%i in ('certutil.exe -view -restrict "disposition=31,notbefore<8/27/2013" -out requestid csv ^| find /v "issued request id"') (   echo deleting row id: %%i   certutil.exe -deleterow %%i request )

disposition 31 denied request, 30 failed request. adjust like. , date of course.

a similar disscussion reference:

certutil -deleterow command doesn't appear runninng

i hope helps.

Windows Server  >  Windows Server General Forum